AuthType failover?

[John A. Murdie]

> John A. Murdie wrote:
>
> > Might it be possible to have the new CUPS server accept connections
> > from the laptops - all on the same subnet - and have some use AuthType
> > Basic and some AuthType Negotiate, simultaneously?
>
> Have you ever looked at the difference of the directives
>
> Satisfy Any
> Satisfy All
>
> inside <Location> and <Limit> sections inside cupsd.conf ?

Yes.

> ...
>
> Disclaimer: I've not yet tested this with multiple "AuthType" statements
> (or it was long ago and I don't remember the results), but this may be
> the way to try and achieve what you want.

I wondered precisely whether such an approach was intended to work or, if this was not documented anywhere, whether someone had tried it. Would the textual order of two AuthTypes in the same Limit cause the first to be tried first (rhetorical)? I had wondered first, however, whether successive Limit sections, the first with AuthType Negotiate, the second with AuthType Basic, might be the answer. I decided not, since a failure of the first would surely cause overall failure to authenticate.

I'll continue to experiment. The difficulty for me is to ensure that I have nothing which will interfere with the experiment, making me think that 'AuthType failover' won't work when in fact it might.

John A. Murdie